|Publication number||US8127135 B2|
|Application number||US 11/536,443|
|Publication date||Feb 28, 2012|
|Filing date||Sep 28, 2006|
|Priority date||Sep 28, 2006|
|Also published as||CN101563696A, CN101563696B, EP2080148A2, US20080082824, WO2008108819A2, WO2008108819A3|
|Publication number||11536443, 536443, US 8127135 B2, US 8127135B2, US-B2-8127135, US8127135 B2, US8127135B2|
|Inventors||Wael M. IBRAHIM, Lan Wang, Jennifer E. Rios, Valluddin Y. Ali, Manuel Novoa|
|Original Assignee||Hewlett-Packard Development Company, L.P.|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (26), Non-Patent Citations (13), Referenced by (3), Classifications (15), Legal Events (2)|
|External Links: USPTO, USPTO Assignment, Espacenet|
Many computing systems comprise multiple, generally independent operating environments such as an operating system (OS) and a basic input/output system (BIOS). Such operating environments communicate with each other. In at least some instances, unfortunately the communication mechanism between the operating environments is susceptible to being snooped by unauthorized entities such as “viruses.”
For a detailed description of exemplary embodiments of the invention, reference will now be made to the accompanying drawings in which:
Certain terms are used throughout the following description and claims to refer to particular system components. As one skilled in the art will appreciate, computer companies may refer to a component by different names. This document does not intend to distinguish between components that differ in name but not function. In the following discussion and in the claims, the terms “including” and “comprising” are used in an open-ended fashion, and thus should be interpreted to mean “including, but not limited to . . . .” Also, the term “couple” or “couples” is intended to mean either an indirect, direct, optical or wireless electrical connection. Thus, if a first device couples to a second device, that connection may be through a direct electrical connection, through an indirect electrical connection via other devices and connections, through an optical electrical connection, or through a wireless electrical connection.
Storage 59 comprises volatile memory such as random access memory (RAM), non-volatile storage such as ROM, a hard disk drive, etc., or combinations thereof. The storage 59 stores an operating system (OS) 62 which also comprises code that is executed by the processor 52. One or more applications/drivers 64 may be present that run under the OS 62 and are executed by processor 52.
The BIOS 56 and OS 62 comprise two software operating environments that communicate with each other via a secure communication mechanism. The following description is provided in the context of the BIOS 56 and OS 62, but can apply in general to other operating environments. To the extent any of the following actions are attributed to the OS 62, such actions may be performed by the OS itself or one or more of the applications/drivers 64 that run under the OS.
The BIOS 56 and OS 62 communicate with each other by encrypting commands and data to be transferred back and forth therebetween. In accordance with embodiments of the invention, the encryption protocol comprises a symmetrical encryption protocol meaning that the BIOS 56 and OS 62 each uses a copy of the same encryption key. For example, the OS 62 uses the encryption key to encrypt a request to send to the BIOS 56, and the BIOS 56 uses its copy of the same encryption key to decrypt the encrypted request. The “shared” encryption key is used to encrypt information in either direction—from OS 62 to BIOS 56 and vice versa.
It is theoretically possible for an entity (e.g., a virus) to snoop encrypted communications between the BIOS 56 and the OS 62 to determine the encryption key that is used. To reduce the possibility of such an unauthorized entity to snoop the communications between the BIOS 56 and OS 62 to deduce the encryption key, a security mechanism is implemented to update the shared key. The security mechanism causes the BIOS 56 and OS 62 to change their shared key in a secure manner. That is, the manner in which the shared key is updated is itself secure. The shared key update procedure can be scheduled to be performed at predetermined or programmable time periods (e.g., once per hour, once per day, etc.) or upon the occurrence of n number of communications between the BIOS 56 and OS 62 (e.g., with each communication packet or every five communication packets).
Referring again to
The term “key” as used herein (e.g., K3) refers to the value of the key. Thus, the value of K3 can be changed to a new value that will still be referred to as K3.
As shown in
As discussed above, it is possible to deduce the value of a symmetric encryption key by monitoring the encrypted packets passed back and forth. Thus, encryption key K1 could be deduced by monitoring the encrypted information exchanged between the BIOS 56 and OS 62. In accordance with embodiments of the invention, a mechanism is provided by which the encryption key used to encrypt information between two operating environments (e.g., the BIOS 56 and OS 62) is changed. Further, changing the encryption key is performed in a way that itself is secure so that the new value of the encryption key is not compromised. Shared symmetrical encryption key K2 is used for purposes of changing encryption key K1 in a way that helps to verify that only an authorized entity is attempting to change K1. Upon changing key K1, key K2 is also changed. Further, in accordance with various embodiments of the invention, the current value of key K2 is used only during the process of changing key K1 during which K2 is also changed. That is, during the process of changing K1, key K2 is also set to a new value which is then used the next time key K1 is to be changed. Because the current value of K2 is used to assist in changing K1 one time (although K2 may be used more than once each time K1 is changed), its value cannot reasonably be deduced by unauthorized entities monitoring traffic between the BIOS 56 and the OS 62. In some embodiments, K1 and K2 are changed. In other embodiments, to ensure that the BIOS 56 and OS 62 can communicate with one another even in the event of an error of some sort, keys K1 and K2 remain unchanged; instead, a copy of keys K1 and K2 (discussed herein as keys K3 and K4, respectively) is used to encrypt/decrypt messages and perform the key update process. In the event of an error, the system can revert back to K1 and K2.
In accordance with embodiments of the invention, one of the BIOS 56 and OS 62 requests the other of the BIOS and OS to compute a new encryption key value for K1 and K2. In one embodiment, the OS 62 requests the BIOS 56 to compute new values for K1 and K2. During this process, key K2 is used by the BIOS 56 to verify the OS's request to change the encryption key K1. Further, key K2 is also used by the OS 62 to verify the communication from the BIOS back to the OS with the new value of K1 and K2. Using K2 to verify the communications between the OS 62 and BIOS 56 helps to prevent an unauthorized entity from exchanging a new key pair with either or both of the OS or BIOS. In the embodiments described herein, only those computing environments (e.g., the BIOS 56 and OS 62) that have access to the shared key K2 can effectuate a change in keys K1 and K2.
In accordance with at least some embodiments of the invention, the system 50 is provided to a user of the system with the values of K3 and K4 being set to the values of K1 and K2, respectively, for both the BIOS 56 and OS 62. That is, initially K3 equals K1 and K4 equals K2 for both the BIOS 56 and OS 62. During an install process for system 50, keys K3 and K4 are changed for both the BIOS 56 and OS 62 in accordance with the method described below. From that point on, encryption between the BIOS 56 and OS 62 uses key K3, and key K4 is used to change key K3 with a resulting change to K4 as well.
In some embodiments, keys K1 and K2 for both the BIOS 56 and OS 62 are not erasable thereby providing the system 50 the ability to revert back to a known functional set of keys (K1 and K2) as desired or needed. For example, if storage 59 malfunctions and is replaced, the replacement hard drive will have the original values for K1 and K2 with keys K3 and K4 mirroring keys K1 and K2. Keys K3 and K4 on system ROM 54 can also be set back to the initial values of K1 and K2.
At 82, the OS 62 requests the BIOS 56 to generate a replacement set of key values for shared keys K3 and K4. At 84, the BIOS 56, through use of K4, verifies the OS's request. If the BIOS 56 successfully verifies the OS's request, then at 86 the BIOS computes a new set of encryption key values (K5 and K6) and provides the new key values K5 and K6 to the OS 62. The key values K5 and K6 are transient in nature meaning that they are only used, in at least some embodiments, for purposes of changing the values of K3 and K4. If the BIOS 56 fails to verify the OS's request, then the process stops or performs another suitable action (e.g., annunciate an alert).
Referring still to
The key change process 100 of
At 108, the OS 62 computes a Hash function-based Message Authentication Code (HMAC) using K4 and the random number recovered 106 to produce an output value, HMAC_OS1. An HMAC is usable to verify the authenticity of a source entity that sends a communication to a destination entity. Other mechanisms besides HMAC are possible and within the scope of the disclosure. At 110, the OS 62 provides the HMAC_OS1 value to the BIOS 56 and requests the BIOS to generate a new set of keys to replace shared keys K3 and K4. Before the BIOS 56 generates the new key values, the BIOS verifies that the request is from an authorized source (i.e., OS 62). The BIOS performs this verification by computing its own HMAC (called HMAC_BIOS1) at 112 using the random number the BIOS generated at 104 and also using the BIOS' copy of K4, which will be the same values used by the OS 62 to generate the HMAC_OS1 value. Accordingly, the HMAC values computed by the OS 62 and the BIOS 56 should match. The HMAC values will not match, however, if an unauthorized entity provided an HMAC value to the BIOS because such unauthorized entity will not have access to the correct values of K4 and/or the random number and thus will have computed a mismatching HMAC value.
At 114, the BIOS 56 compares the HMAC_OS1 and HMAC_BIOS1 values to determine if the values match. If the values do not match, the process fails and stops at 116. An alert or other suitable response can be performed in this situation as desired. If, however, the HMAC_OS1 and HMAC_BIOS1 values match, the method continues at 118 at which the BIOS generates a new key pair, K5 and K6. Such keys can be computed in accordance with any suitable technique.
At 120, the BIOS computes another HMAC value, this time using the BIOS' copy of K4 and another value that is the combination of K5, K6, and the random number generated at 104. The resulting HMAC value at 120 is called HMAC_BIOS2 and, as explained below, will be used by the OS 62 to verify the new key values K5 and K6 are transmitted to the OS by an authorized source (i.e., the BIOS 56). The values of K5, K6, and the random number are combined together, in at least one embodiment, by concatenating such values together. Other techniques for combining K5, K6 and the random are possible as well and within the scope of this disclosure.
Referring still to
At 128 (
At 134, the OS computes an HMAC value using K4 and a combination of K5, K6 (recovered in 132) and the random number from 104. In at least some embodiments, the values of K5, K6 and the random number are combined together in 134 in the same way as such values were combined together in 120 (e.g., concatenation). The resulting HMAC value from 134 is called HMAC_OS2. The OS 62 compares at 136 HMAC_OS2 with HMAC_BIOS2 to verify that the source of the new keys K5 and K6 is an authorized entity (e.g., BIOS 56). If the HMAC values do not match in 136, then the key update process terminates in failure at 138. Otherwise, at 140 the OS accepts the new keys K5 and K6 from BIOS 56 by using K5 and K6 to overwrite K3 and K4, respectively. At 142, the OS 62 informs the BIOS 56 that the OS has received and accepted the new key values K5 and K6. This acknowledgment causes the BIOS 56 to use its copy of K5 and K6 to overwrite its copy of K3 and K4, thereby replacing the previous values of K3 and K4 with the values of K5 and K6.
In addition to being able to update the shared keys K3 and K4 used between the BIOS 56 and OS 62, the security mechanism of the disclosed embodiments also permits a reset to occur by which the BIOS 56 and OS 62 reset their shared keys to a prior known set of keys, K1 and K2 so that keys K1 and K2 can be used for encryption/decryption and key update purposes.
In accordance with at least some of the embodiments of the invention, no two systems will have the same Kodd and Keven. Thus, even if an attacker gains access to the key pair on one system, such knowledge will be of no use to attack other systems thereby protecting against a global attack.
The above discussion is meant to be illustrative of the principles and various embodiments of the present invention. Numerous variations and modifications will become apparent to those skilled in the art once the above disclosure is fully appreciated. It is intended that the following claims be interpreted to embrace all such variations and modifications.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US5491749 *||Dec 30, 1993||Feb 13, 1996||International Business Machines Corporation||Method and apparatus for entity authentication and key distribution secure against off-line adversarial attacks|
|US5515439 *||Nov 9, 1994||May 7, 1996||International Business Machines Corporation||Exchange certificate for one way validation of information|
|US5841864 *||Aug 5, 1996||Nov 24, 1998||Motorola Inc.||Apparatus and method for authentication and session key exchange in a communication system|
|US7353388 *||Feb 9, 2004||Apr 1, 2008||Avaya Technology Corp.||Key server for securing IP telephony registration, control, and maintenance|
|US7565537 *||Jun 10, 2002||Jul 21, 2009||Microsoft Corporation||Secure key exchange with mutual authentication|
|US7565553 *||Jan 14, 2005||Jul 21, 2009||Microsoft Corporation||Systems and methods for controlling access to data on a computer with a secure boot process|
|US20010002486 *||Dec 13, 2000||May 31, 2001||Cryptography Research, Inc.||Leak-resistant cryptographic method and apparatus|
|US20020094085 *||Jan 16, 2001||Jul 18, 2002||Roberts Paul Cador||Methods and systems for generating encryption keys using random bit generators|
|US20020164025 *||Jan 5, 2001||Nov 7, 2002||Leonid Raiz||Software usage/procurement management|
|US20030229789 *||Jun 10, 2002||Dec 11, 2003||Morais Dinarte R.||Secure key exchange with mutual authentication|
|US20040005061 *||Jul 8, 2002||Jan 8, 2004||Buer Mark L.||Key management system and method|
|US20040039924 *||Jan 14, 2003||Feb 26, 2004||Baldwin Robert W.||System and method for security of computing devices|
|US20040083393 *||Oct 24, 2002||Apr 29, 2004||Jordan Royce D.||Dynamic password update for wireless encryption system|
|US20040117318 *||Dec 16, 2002||Jun 17, 2004||Grawrock David W.||Portable token controlling trusted environment launch|
|US20040157584 *||Nov 21, 2003||Aug 12, 2004||Michael Bensimon||Method for establishing and managing a trust model between a chip card and a radio terminal|
|US20050025091 *||Aug 5, 2003||Feb 3, 2005||Cisco Technology, Inc.||Methods and apparatus for dynamic session key generation and rekeying in mobile IP|
|US20050074125 *||Aug 18, 2004||Apr 7, 2005||Sony Corporation||Method, apparatus and system for use in distributed and parallel decryption|
|US20050111664 *||Nov 20, 2003||May 26, 2005||Ritz Andrew J.||BIOS integrated encryption|
|US20050120245||Nov 26, 2004||Jun 2, 2005||Matsushita Electric Industrial Co., Ltd.||Confidential information processing system and LSI|
|US20050232427 *||Apr 14, 2004||Oct 20, 2005||Microsoft Corporation||Unilateral session key shifting|
|US20060050869 *||Oct 24, 2005||Mar 9, 2006||Groove Networks, Inc.||Method and apparatus for managing secure collaborative transactions|
|US20060104440||Oct 30, 2003||May 18, 2006||Alain Durand||Simplified method for renewing symmetrical keys in a digital network|
|US20060269066 *||Dec 21, 2005||Nov 30, 2006||Schweitzer Engineering Laboratories, Inc.||System and method for converting serial data into secure data packets configured for wireless transmission in a power system|
|EP1424804A2||Nov 27, 2003||Jun 2, 2004||Fujitsu Limited||Symmetric key update for encryption communication system|
|JPH03214834A||Title not available|
|WO2005107141A1||May 2, 2005||Nov 10, 2005||Research In Motion Limited||Systems and methods to securely generate shared keys|
|1||Beilare, "Message Authentication Using Hash Functions-The HMAC Construction", Cryptobytes Magazine, vol. 2, No. 1, Jan. 1, 1996, pp. 1-5.|
|2||Beilare, "Message Authentication Using Hash Functions—The HMAC Construction", Cryptobytes Magazine, vol. 2, No. 1, Jan. 1, 1996, pp. 1-5.|
|3||Bellare M: "Message Authentication Using Hash Functions-The HMAC Construction" Cryptobytes Magazine, XX, XX, vol. 2, No. 1; Jan. 1, 1996; p. 1-5.|
|4||Bellare M: "Message Authentication Using Hash Functions—The HMAC Construction" Cryptobytes Magazine, XX, XX, vol. 2, No. 1; Jan. 1, 1996; p. 1-5.|
|5||CN Decision of Rejection, Appln No. 200780043388,1, date of mailing May 25, 2011, 6 p.|
|6||CN Office Action dated Jun. 10, 2010, pp. 5.|
|7||EP examination report, dated Jul. 31, 2009, pp. 5.|
|8||JP Office Action, Appln No. P2009-530433, date of mailing Oct. 13, 2011, 2 p.|
|9||Mihir Bellare et al., "Message Authentication using Hash Functions-The HMAC Construction," RSA Laboratories' CryptoBytes, vol. 2, No. 1, Spring 1996, 5 pp.|
|10||Mihir Bellare et al., "Message Authentication using Hash Functions—The HMAC Construction," RSA Laboratories' CryptoBytes, vol. 2, No. 1, Spring 1996, 5 pp.|
|11||RSA Laboratories, "3.6.1 What is Diffie-Hellman?", Copyright 2004 RSA Security, 2 pp. [Online] http://www.rsasecurity.com/rsalabs/node.asp?id=2248.|
|12||Translation of CN Decision of Rejection, Appln No. 200780043388,1, date of mailing May 25, 2011, 14 p.|
|13||Translation of JP Office Action, Appln No. P2009-530480, date of mailing Oct. 13, 2011, 2 p.|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US9563773 *||Feb 26, 2014||Feb 7, 2017||Dell Products L.P.||Systems and methods for securing BIOS variables|
|US20120069995 *||Sep 22, 2010||Mar 22, 2012||Seagate Technology Llc||Controller chip with zeroizable root key|
|US20150242630 *||Feb 26, 2014||Aug 27, 2015||Dell Products L.P.||Systems and methods for securing bios variables|
|U.S. Classification||713/171, 380/283, 380/45, 380/259, 380/278, 713/168, 380/260, 380/44, 380/284, 380/277|
|Cooperative Classification||G06F21/606, G06F21/72|
|European Classification||G06F21/72, G06F21/60C|
|Sep 28, 2006||AS||Assignment|
Owner name: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P., TEXAS
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:IBRAHIM, WAEL M.;WANG, LAN;RIOS, JENNIFER E.;AND OTHERS;REEL/FRAME:018335/0914
Effective date: 20060927
|Jul 28, 2015||FPAY||Fee payment|
Year of fee payment: 4